CVE-2007-1301: Buffer Overflow

Published Mar 7, 2007

Updated

Stack-based buffer overflow in the IMAP service in MailEnable Enterprise and Professional Editions 2.37 and earlier allows remote authenticated users to execute arbitrary code via a long argument to the APPEND command. NOTE: this is probably different than CVE-2006-6423.

Affected Software

2 affected components

MailEnable MailEnable Enterprise

MailEnable MailEnable Professional=2.37

Event History

Mar 7, 2007

CVE Published

12:19 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1301?

CVE-2007-1301 is classified as critical due to its potential to allow remote authenticated users to execute arbitrary code.

How do I fix CVE-2007-1301?

To fix CVE-2007-1301, update to MailEnable Enterprise and Professional Editions version 2.38 or later.

Who is affected by CVE-2007-1301?

CVE-2007-1301 affects MailEnable Enterprise and Professional Editions 2.37 and earlier.

What type of vulnerability is CVE-2007-1301?

CVE-2007-1301 is a stack-based buffer overflow vulnerability in the IMAP service.

Can CVE-2007-1301 be exploited remotely?

Yes, CVE-2007-1301 can be exploited by remote authenticated users via a long argument to the APPEND command.